
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0a555f0-781d-3c7f-8ee2-05b6d7be41e4.roa
File: a0a555f0-781d-3c7f-8ee2-05b6d7be41e4.roa (raw, json)
Hash identifier: TVRb3jIc80411OzoHp0WigmwiDbnswBr4Wz+3eVAmY0=
Subject key identifier: 5A:E0:55:CD:4A:0E:C7:F3:6A:E1:D9:50:30:B1:33:FF:B9:77:34:B3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3BB60D7B695A68D765F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0a555f0-781d-3c7f-8ee2-05b6d7be41e4.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33659
IP address blocks: 69.248.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3b:b6:0d:7b:69:5a:68:d7:65:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=749c8583-ed88-4128-a91a-a7f6cc3697ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:b5:3f:e4:86:e0:f8:3c:0d:a7:e5:8c:e4:
a0:06:94:42:b4:97:fb:b1:e5:4d:7a:d9:80:62:2f:
0f:19:39:c5:25:7e:8e:29:0b:d9:08:e3:6b:cf:88:
49:5b:f0:de:f9:bb:8c:d2:ce:b4:67:eb:b4:96:37:
ef:a0:d3:de:82:f0:a7:18:bc:2f:7f:90:8c:07:65:
0a:90:4c:10:7f:d9:08:08:e3:19:1b:64:36:71:34:
9a:98:e1:94:e5:73:2e:c6:da:0e:75:d2:74:36:33:
53:5d:57:30:07:ba:88:18:6a:1c:00:91:71:8c:d3:
99:d7:5a:2e:10:56:05:cc:8c:99:4d:b1:9f:41:cc:
bf:d4:ac:e7:48:d5:ef:93:ea:8f:77:04:10:db:c8:
5c:49:ff:05:80:21:57:ee:64:d0:b2:b6:1c:60:d0:
da:75:fa:82:fb:23:0c:b6:09:6f:f4:92:e3:20:0d:
fc:0e:6b:c6:c7:0f:80:1c:aa:ee:a0:71:ad:9e:3e:
26:be:32:64:ae:71:51:fd:69:26:54:1f:30:8c:31:
81:00:e4:39:8b:a4:a9:5f:58:88:7f:a5:54:40:08:
4e:2b:d2:7c:f5:0c:19:b6:f8:3d:26:fe:e2:1d:28:
03:fc:50:28:2b:1e:68:c1:00:e3:54:08:67:10:ca:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:55:CD:4A:0E:C7:F3:6A:E1:D9:50:30:B1:33:FF:B9:77:34:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0a555f0-781d-3c7f-8ee2-05b6d7be41e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.248.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:91:43:bb:79:fc:c6:1f:ef:d2:93:e5:90:50:86:95:6f:ba:
6a:96:0b:da:8d:96:d3:3e:2a:c3:8a:43:c0:28:90:49:81:49:
47:14:92:4a:01:36:45:09:0e:d3:b8:eb:10:44:e8:cf:95:13:
39:d6:61:6b:dd:ff:69:ba:25:e2:b4:70:f8:d9:8b:be:ad:fd:
31:9a:bd:20:82:95:6b:20:cc:f3:e2:dc:95:76:97:31:d0:49:
c4:ff:a9:cb:68:f6:34:42:48:89:3a:34:5e:0a:27:13:63:d5:
71:52:47:01:70:f1:c0:01:1c:d9:2f:18:c4:41:0c:9c:47:d8:
5b:89:dd:a1:a1:ad:a0:e8:e8:cc:a9:5c:7b:ed:9a:b3:20:e4:
c5:9f:65:8e:a1:9b:d0:90:fe:98:05:26:df:c7:03:6c:df:1f:
fd:00:67:01:cd:14:fb:39:d2:3d:3a:45:7e:25:c6:d4:1f:06:
d6:34:45:ff:46:57:24:0c:4e:d2:14:3a:dc:28:1b:39:66:7c:
d2:7c:b1:0f:3c:45:f5:cc:a9:85:c8:0e:34:d2:ce:9f:14:be:
7f:87:cb:1d:f0:c4:fc:00:6e:f1:0b:24:e2:de:a3:e3:8b:48:
ff:32:63:fa:05:b1:e7:9d:bc:30:29:38:1f:3e:6b:7b:7f:7e:
9a:8d:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:07:47 2026 by rpki-client